diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 64b3b56..23c2dd4 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -47,7 +47,7 @@ jobs:
           github-token: ${{ secrets.OBLT_CLI_GITHUB_TOKEN }}
           cluster-name:  ${{ env.SERVERLESS_PROJECT }}
 
-      - uses: google-github-actions/get-secretmanager-secrets@dc4a1392bad0fd60aee00bb2097e30ef07a1caae # v2.1.3
+      - uses: google-github-actions/get-secretmanager-secrets@95a0b09b8348ef3d02c68c6ba5662a037e78d713 # v2.1.4
         with:
           export_to_environment: true
           secrets: |-
diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index 2dda4ba..9e55569 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -33,12 +33,12 @@ jobs:
         name: Release
         
       - name: Generate build provenance (Distribution)
-        uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0  # v1.3.3
+        uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8  # v1.4.1
         with:
           subject-path: "${{ github.workspace }}/${{ env.RELEASE_DISTRO }}"
           
       - name: Generate build provenance (Packages)
-        uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0  # v1.3.3
+        uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8  # v1.4.1
         with:
           subject-path: "${{ github.workspace }}/${{ env.RELEASE_PACKAGES }}"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1d9e493..c854d27 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -39,12 +39,12 @@ jobs:
       run: ls -al ${{ env.RELEASE_DISTRO }}
     
     - name: Generate build provenance (Distribution)
-      uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0  # v1.3.3
+      uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8  # v1.4.1
       with:
         subject-path: "${{ github.workspace }}/${{ env.RELEASE_DISTRO }}"
         
     - name: Generate build provenance (Packages)
-      uses: actions/attest-build-provenance@5e9cb68e95676991667494a6a4e59b8a2f13e1d0  # v1.3.3
+      uses: actions/attest-build-provenance@310b0a4a3b0b78ef57ecda988ee04b132db73ef8  # v1.4.1
       with:
         subject-path: "${{ github.workspace }}/${{ env.RELEASE_PACKAGES }}"